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(57) Abstract: Method and system 
for copy protecting information from a 
service provider, which is transmitted 
between a point of deployment (POD) 
module and a set-top box, are disclosed 
by an arrangement in which control 
information pairs are transmitted from 
the POD module to the set-top box. 
The control information pairs are 
respecdvely associated with the portions 
of the copy protected information, 
for example, elementary streams, 
transmitted between the POD module 
and host device. To prevent hackers 
or an intruder from tampering with the 
copy protected informauon, the control 
information pairs are incorporated into 
a shared key calculation in the POD 
module and set-top box. The shared 
keys are used by the POD module 
and set-top box to encrypt and decrypt 
the information (e.g. elementary 
streams). If the at least one control 
information pair is tampered with during 
transmission between the POD module 
and the set-top box, then the shared 
key(s) calculated by the set-top box and 
POD module will not match, and the 
set-top box will not be able to correctly 
decrypt the encrypted information 
received from the deployment module. 
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System and method for copy protecting transmitted information. 



This invention relates to a communication system and, more particularly, to a 
copy protection system for information transmitted between a deployment module, such as a 
point of deployment (POD) module, and a host device, such as a set-top box. 

5 

Digital video and audio consumer electronics/devices are used by consumers 
to receive and conduct numerous services and transactions, for example, to receive video, 
audio and data streams from a (cable television) service provider, such as Emergency 
Alerting, Interactive Program Guides, Impulse Pay-Per-View (IPPV), Video On Demand 

10 (VOD), General Messaging, and Interactive Services. 

In particular, one such device is a point of deployment (POD) module. A POD 
module is a removable card inserted into a host device, such as a set-top box. As is well 
known in the art, a POD module provides several functions including security that is 
physically separate from a set-top box's navigation function and processing out-of-band cable 

1 5 signals. For additional details on POD modules, see SOCIETY OF CABLE 

TELECOMMUNICATIONS ENGINEERS, INC. (SCTE) Document: SCTE DVS 131 Rev. 
7, entitled "Draft Point-of-Deployment (POD) Module Interface Proposal" dated December 
3, 1998, (hereinafter known as "DVS13 lr7"). 

Consumers rely on such devices to communicate, access programs and 

20 services or engage in conunercial transactions in which privacy and/or security is desired 
and, in many cases, expected. In this regard, the POD module also decrypts content 
information encrypted by service providers. It may be part of a so-called "conditional access" 
(CA) system that spans the head-end of a service provider network and the POD module 
itself 

25 To receive information from a particular service provider, a POD module that 

contains an algorithm related to a particular proprietary CA system, which is associated with 
a particular service provider, must be inserted to a host device. After content information is 
selected by the host device/viewer and received in the POD module from a service provider, 
it is decrypted in the POD module. The (decrypted) content information is again encrypted in 
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the POD modxile with a new set of keys to protect it when transmitted across the POD/host 
interface. ' 

The content information is transmitted in a so-called transport stream, which 
contains several elementary streams. An elementary stream may contain a video feed, a 
5 sound track or a data file. Copy protection is provided on the basis of elementary streams. 

For every copy protected elementary stream, there is an associated Copy 
Control Information (CCI). It is used by the host device to decide (1) how many copies (e.g. 
one copy, zero copies) of the elementary stream can be made; (2) what copy formats are 
allowed (e.g. analog formats including composite and component and digital formats); and 
10 (3) other copy protection related activities. The CCI is passed from the POD module to the 
host device to indicate how the corresponding elementary stream of the content should be 
treated. To prevent an "intruder" from tampering with the CCI, it must be protected when 
transmitted to the host device. 

Standard cryptographic methods exist for the general encryption/decryption 
15 within such a system, however, these methods each have significant limitations. In one such 
method a proprietary CA system, as well as its associated algorithms for 
encryption/decryption, is used. Instead of transmitting every CCI associated with an 
elementary stream in the content, this method transmits the most restrictive CCI to the host. 

Although, the CCI is not encrypted when transmitted between the POD 
20 module and the host device, it is afforded some degree of protection. The CCI is typically 
embedded in shared keys that are used to encrypt the content information at the POD module 
and decrypt the content information when received by the host device. 

One problem with this approach is that if the content contains multiple 
elementary streams, each elementary stream may have a different CCI. Since the host device 
25 uses the most restrictive CCI for its copy protection processing, content information may be 
prevented from being properly copied. For example, if there are two elementary streams, and 
the CCI associated with the first one indicates "copy once", while the CCI associated with the 
second one indicates "never copy", then neither of the elementary streams can be copied. 
This prevents a stream from being legally copied when another (possibly imrelated) stream 
30 has a more restrictive CCI. 

Thus, there is a clear and present need for an effective means to provide copy 
protection that utilizes encryption, while still providing consumers with the information 
desired in a less restrictive manner. In particular, copy protection of information between a 
POD module and a set-top box. 
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The problems associated with copy protection of information, such as content 
information from a service provider, transmitted between a deployment module, such as a 
5 POD module, and a host device, such as a set-top box, are reduced or overcome by an 

arrangement in accordance v^th the principles of the present invention in which at least one 
control information pair is associated vrith the transmitted copy protected information, for 
example, one control information pair for each elementary stream relating to selected content 
information (e.g. a program from a cable service provider). 

1 0 Specifically, the control information pair includes, in addition to copy control 

information (CCI), a stream identifier. The stream identifier uniquely identifies the 
transmitted copy protected information (or portion thereof e.g. an elementary stream). 

In particular, it is an object of the present invention to eliminate the use of the 
most restrictive copy control information (CCI), when for example multiple content 

1 5 information or elementary streams are received by a deployment module. 

In one illustrative embodiment, a Packet Identifier (PID) associated with each 
elementary stream of the transmitted copy protected information is used as the stream 
identifier for the respective elementary stream. A PID indicates the type of data stored in the 
packet payload. Preferably, the stream identifier is incorporated with the Packetized 

20 Elementary Stream (PES) header of the elementary stream. Since the PES header for copy 
protected information is encrypted during transmission between the deployment module and 
host device, the stream-identifier is in tum protected. 

To help prevent hackers or intruders from illegally manipulating the copy 
protected information, the control information pair(s) is incorporated into shared (session) 

25 keys, which are generated respectively, on both the deployment module and the host device. 
Accordingly, if the control information pair(s) is tampered with, then the respective shared 
key(s) in the host and deployment module will not match. As a result, the host device will not 
be able to correctly decrypt the copy protected information encrypted by the deployment 
module with its shared key(s), thereby thwarting an intruder's attempt at illegally 

30 manipulating the copy protected information. 

The invention will be more readily understood after reading the following 
detailed description taken in conjunction with the accompanying drawing, in which: 
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Fig.l illustrates an exemplary system in accordance with the principles of the 
present invention; and 

Fig 2 is a flowchart depicting the process for copy protecting transmitted 
information in the system of Fig. 1 . 

5 

Fig. 1 is an exemplary system according to the principles of the present 
invention in which copy protection for information transmitted from a deployment module to 
a host device is implemented. It will be recognized that Fig. 1 is simplified for explanation 

1 0 purposes and that the full system environment for the invention will comprise, for example, a 
cable, fiber or satellite service provider network or provisions for network reliability through 
redundancy, all of which need not be shown here. The system illustratively includes a host 
device 10, such as a set-top box, and a deployment module 12, such as a point of deployment 
(POD) module, which conununicate with each other through a communication medium 14, 

1 5 for example, v/ireless communication, electromagnetic card interface, optical 
communication, and the like. 

Deployment module 12 includes a host interface 16 and a processor 18. Host 
interface 16 is used to commimicate v^th host device 10 via medium 14. Host interface 16 
may be any conventional system for allov/ing the transmission of information between the 

20 host device and the deployment module. For example, medium 14 may include a 

standardized bi-directional access to Out-Of-Band RF and in-band MPEG-2 Transport 
Stream input and output device. 

The majority of logic, control, supervisory, translation functions required for ■ 
the operation of deployment module 12 is performed by processor 18 which also includes 

25 programs for the operations functionally described in FIG. 2. As described in detail below, 
execution of these program implements the functionality necessary to copy protect 
information. Processor 18 can be any of a number of commercially available processors, for 
example that may include dedicated digital signal processors (DSPs), a central processing 
unit (CPU) and memory chips. 

30 Although deployment module 12 is described as a POD module, this 

arrangement is merely for convenience and it is to be understood that deployment modules 
are not limited to POD modules, per se. As used herein, the term "deployment module" refers 
to any type of (1) point of deployment module, (2) wireless, cellular or radio data interface 
appliance, (3) smartcard (4) personal computer, and (5) internet interface appliance, which 
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facilitates the transfer of data, access remote services or ehgage in transactions and in which 
privacy and/or security is desired. 

Host 10 communicates with deployment module 12 through communication 
medium 14. Host 10 includes a deployment module interface 24, which is arranged to operate 
5 with host interface 16, a server provider interface 20 and a processor 22. 

Similar to the deployment module, the majority of logic, control, supervisory, 
translation functions required for the operation of host 10 are performed by processor 22 
which also includes programs for the operations functionally described in Fig. 2. As 
described in detail below, execution of these programs implements the functionality 
1 0 necessary to copy protect information transmitted between a deployment module and a host. 
Processor 22 can be any of a number of commercially available processors, for example that 
may include dedicated digital signal processors (DSPs), a central processing unit (CPU) and 
memory chips. 

The principles of the present invention are particularly useful for the copy 
1 5 protection of information or data transmitted between a POD module and a host device in a 

service provider communications network, such as a cable television network. However, it is 

to be understood that the steps described below in FIG. 2 are equally applicable to other 

devices described above. 

Fig. 2 is a flow chart showing the steps carried out within the system of Fig. 1 
20 to implement copy protection of information transmitted between a deployment module and a 

host device according to the principles of the present invention. The operation of copy 

protection in such communications networks is started by authenticating the host device 

using the deployment module. 

With simultaneous reference to Figs. 1 and 2, the process contemplated by the 
25 invention is initiated in step 200 of Fig. 2, when a host device, for example host device 10 of 

Fig. 1, transmits a certificate to a service provider (not shown) for host device authentication. 

The certificate, for example, includes a host ID. Typically, this step is carried out during a 

deployment module initialization, for example, when deployment module 12 of Fig. 1, is 

inserted into a card interface of host device 10 or host device 10 is powered up. If the 
30 certificate is not identified or is inconsistent with information at the service provider, then the 

host device is invalidated and the transaction is terminated. If the host device is authenticated 

in step 202, the process proceeds to step 206. 

In step 206, when particular (content) information is selected, the host device 

notifies the deployment module via a request message. The particular information is selected. 
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for example, by a user selecting a channel on cable television network. By looking at the 
electronic program guide (EPG), the host device determines which video, audio and/or data 
streams are contained in the selected information, for example, channel or programs. The 
request message also contains the PIDs of the elementary streams associated with the 
5 selected information. 

In step 208, the deployment module, after receiving the selected PIDs from the 
request message, prepares to decrypt the elementary streams identified by the PIDs and then 
re-encrypt them for copy protection. Preparing the elementary stream decryption involves 
deriving session keys from a conditional access (C A) system, so that the deployment module 

10 can decrypt the selected information from the service provider. After this preparation is 

complete, in step 210, a reply message is sent from the deployment module to the host device 
to indicate that the deployment module is ready to decrypt the associated streams froni the 
service provider. Included in the reply message is at least one control information pair 
associated with the selected information, and each pair having a stream identifier and a CCL 

15 Thereafter, in step 212, shared keys are calculated by the deployment module 

and host device, incorporating the control information pair(s), unlike the prior art that used 
only a CCI. The shared keys are a pair of keys (for example even and odd keys) shared by 
both the deployment module and the host device. Both the deployment module and the host 
device use the shared keys, respectively, to encrypt and decrypt information crossing the 

20 deployment module/host device interface. For the shared key calculation any of a number of 
methods can be used, see for example. Cable Television Laboratories specification entitled 
"OpenCable™ POD Copy Protection System DRAFT REV 991008" Document: IS-POD- 
CP-WD02-991027, published on October 27, 1999, (hereinafter "IS-POD-CP"), which is 
incorporated by reference herein. As is well known by persons skilled in the art, the shared 

25 key pair is a ftanction of a number of factors, including random mmibers, public keys 
exchanged between the deployment module and host device, and the Host ID. 

Illustratively, the host device computes an ODD/EVEN key pair using a 
conventional hash ftmction, for example, SHA-1 Secure Hash Algorithm (for fiuther details 
on the SHA-1 hash ftmction, see IS-POD-CP), where the control information pair(s) is 

30 represented by "streamer identifier-cci"; 

ODDhosi = SHA-l[NHost| streamer_identifier-cci| Ks | Kcpss] isb56 
EVENhosi = SHA-1 [Nhosi I streamer Jdentifier-cci| Ks | Kcpss] msb56 
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The deployment module's CA module computes an ODD/EVEN key pair using the SHA-1 
has function: 

ODDcA_Moduie = SHA-1 [Nhosi I Nmoduie I streamer_identifier-cci| Ks | Kvaiidated.cpss] isb56 

5 

EVENcA.Moduie = SHA-1 [Nhosi I Nmoduie I Streamer Jdentifier-cci| Ks | Kvaiidatcd^cpss] msb56 

where Nhosi and Nmoduie are two random numbers generated on the host device and 
deployment module respectively, Ks and Kcpss are two generated keys, lsb56 refers to the least 
10 significant 56 bits and msb56 refers to the most significant 56 bits, and streamer identifier-cci 
is calculated as follows, 

streamer identifier-cci = SHA-1 [stream identifierl|CCIi | ....| stream identifiernj CCIJ 

1 5 where the stream identifier! and CCIi are the control information pair for elementary stream i. 

In a preferred embodiment the stream identifier uniquely identifies an 
elementary stream and is inserted into the PES header associated with the elementary stream 
at the time a PID is assigned to the elementary stream. Preferably, this takes place in the 
head-end of the service provider network at the time a transport stream is generated from 

20 elementary streams. In particular, a 7-bit field in the PES header called "additional copy info" 
is available for copy protection, see International Telecommunication Union (ITU-T) 
Recommendation H.222.0 / ISO/IEC 13818-1 (1996-04), entitled "Information Technology - 
Generic Coding of Moving Pictures and Associated Audio Information: Systems," which is 
incorporated by reference herein. The additional copy info field is used to store the stream 

25 identifier. A 7-bit number can support up to 128 different stream identifiers, which is 
typically enough for the number of copy protected elementary streams in one transport 
stream. After the host device has decrypted the encrypted PES, the stream identifier is 
retrieved. 

After the deployment module finishes its calculation of the shared session 
30 key(s), it sends a synchronization message to the host device to indicate that it is ready to 
send the encrypted information to the host device, represented by step 214. 

After the host device finishes its calculation of the shared session key(s), it 
synchronizes with the deployment module, and the deployment module transmits the 
encrypted information, represented by step 216. 
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The host device then begins to decrypt the encrypted information (e.g. the 
selected copy protected content information that has been encrypted with the shared key(s)). 
Accordingly, host device 10 is allowed to complete a transaction or receive the selected 
services. For example, the host device changes to a selected program channel of a cable 
service provider. However, if the shared key(s) do not match (for example, due to an attempt 
to temper with the control information pairs), the decryption of the copy protected content 
fails, for example, viewers will only receive scrambled information, such as scrambled 
pictures. These steps are represented by steps 218-222. Thereafter, the user can select new 
information by returning to step 206. 

Advantageously, even if an interloper intercepts a transmission between the 
host device and deployment module, he or she can not directly detect the stream identifier, 
since it is encrypted in the PES header. Thus, even if a CCI is detected, an interloper can not 
tamper with the selected information, for example, swap the PID fields associated with two 
streams. The possibility of such remapping is substantially reduced, since the stream 
identifiers are bound to their associated elementary streams and this binding is protected by 
encryption. 

Finally, it is to be understood that although the invention is disclosed herein m 
the context of particular illustrative embodiments, those skilled in the art will be able to 
devise numerous alternative arrangements. Such alternative arrangements, although not 
explicitly shown or described herein, embody the principles of the present invention and are 
thus within its spirit and scope. 
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1 . A system for copy protecting information, the system comprising: 

- a point of deployment module (12); and 

- a set-top box (10) including; 

wherein the set-top box (10) transmits a request message for information, the point of 
5 deployment module generates a reply message which includes at least one control 

information pair, relating to the information, each control information pair having copy 
control information and a stream identifier, respectively generating a first in the point of 
deployment module (12) and a second key in the set-top box, using the at least one control 
information pair, and the point of deployment module (11) encrypting the information with 
10 the first shared key and transmitting the encrypted information to the set-top box (10), and 
the set-top box (10) decrypting the encrypted information with the second shared key when 
the first and second shared keys match. 

2. A method of copy protecting information transmitted between a deployment 
1 5 module (11) and a host device (1 0), the method comprising the steps of: 

(a) transmitting a request message for the information fi-om the host device 
(10) to the deployment module (12); 

(b) transmitting a reply message from the deployment module (12) to the host 
(10) device, wherein the reply message includes at least one control information pair, each 

20 pair having a copy control information and a stream identifier; 

(c) generating a first shared key at the host (10) and a second shared key at the 
deployment module (12), respectively, using the at least one control information pair and an 
encryption means (22, 18); 

(d) encrypting, in the deployment module (10), the information; 

25 (e) transmitting the encrypted information from the deployment module (12) 

to the host (10); 

(f) decrypting, at the host (10), the encrypted information; and 

(g) receiving the information at the host (10) when the first and second shared 

keys match. 
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3. The method of claim 2, wherein the deployment module (12) is a point of 

deployment module. 

5 4. The method of claim 2, wherein the host (1 0) is a set-top box. 

5. The method of claim 2, wherein the encryption means includes a hash 

function. 



10 6. The method of claim 2, wherein the encrypted information in an elementary 

stream of information is encrypted with the first shared key. 

7. The method of claim 6, wherein the stream identifier that is transmitted to the 

host (10) is incorporated with the Packetized Elementary Stream (PES) header of the 
1 5 elementary stream. 



8. A deployment module (10) for use with a host device (12), the deployment 
module comprising: 

- means for commimicating (18, 16) with the host device (12); and 
20 - a processor (18) for, in response to a request message for information from the host 
device (10), generating a reply message to the host device (10), the reply message 
including at least one control information pair, each pair having copy control information 
and a stream identifier, generating a first shared key using the at least one control 
information pair, encrypting the information with the first shared key and transmitting the 
25 encrypted information to the host device (10). 

9. The deployment module (12) of claim 8, wherein the deployment module (12) 
is selected fi-om the group consisting of a point of deployment module, wireless data interface 
appliance, smartcard, personal computer or internet interface appliance. 

30 

10. The deployment module (12) of claim 9, wherein the host device is a set-top 
box. 
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1 1 . The deployment module (12) of claim 10, wherein the encrypted information 

is transmitted to the host device using a transport stream, wherein the transport stream 
includes at least one elementary stream. 

5 12. The deployment module (12) of claim 11, wherein respective ones of the at 

least one control information pairs is associated with respective ones of the at least one 
elementary streams. 

13. A host device (10) for use with a deployment module (12), the host device 
1 0 comprising: 

- means for conununicating (20, 24) with the deployment module; and 

- a processor (22) for generating a request message for information to the deployment 
module (12), and in response, receiving a reply message from the deployment module 
(12), wherein the reply message includes at least one control information pair, each pair 

15 having copy control information and a stream identifier, generating a second shared key 
using the at least one control information pair, and decrypting encrypted information, 
received from the deployment module (12), with the second shared key, and receiving the 
information when the second shared key matches a first shared key generated in the 
deployment module (12). 

20 

14. The host device (1 0) of claim 13, wherein the deployment module (10) is 
selected from the group consisting of a point of deployment module, wireless data interface 
appliance, smartcard, personal computer or internet interface appliance. 

25 15. The host device ( 1 0) of claim 14, wherein the host device ( 1 0) is a set-top box. 

16. The host device (10) of claim 13, wherein the received encrypted information 
is included in a transport stream, wherein the transport stream includes at least one 
elementary stream. 

30 

17. The deployment module (12) of claim 16, wherein respective ones of the at 
least one control information pairs is associated with respective ones of the at least one 
elementary streams. 
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